The White Company
The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--6688d679-ccdb-4f12-abf6-c7545dd767a4
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-02T12:53:29+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (7)
Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding
Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a
An adversary may rely upon a user opening a malicious file in order to gain execution. Users may be subjected to social engineering to get them to ope
Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a clo
Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or
Adversaries may send spearphishing emails with a malicious attachment in an attempt to gain access to victim systems. Spearphishing attachment is a sp
An adversary may gather the system time and/or time zone settings from a local or remote system. The system time is set and stored by services, such a
Software & Tools (2)
NETWIRE is a publicly available, multiplatform remote administration tool (RAT) that has been used by crimi
Revenge RAT is a freely available remote access tool written in.NET (C#).(Citation: Cylance Shaheen Nov 20
Explore this actor's full graph with Ninja Signal